fix for auth via keystone