bugfix for unauthorized replies in JSON handler