fixed authentication for smart proxy callbacks