fixed another auth-related bug