fix auth workflow