fixed auth backend