fixed SSO