check auth bug