fix  auth bug