fix authentication paths