removed the 403 when different auth uses same activity id