fixed auth response