fixed auth for signin