bug fix: user can clone repos