fixed bug with auth