patch for old cwl auth