fixed bug in Authorization scaffold