fixed another bug when auth not in cfg