fixed timing with global auth