fix auth attr