fix auth.py