not auth bug fix