fix up auth