fix subdomain auth