bug fix by auth_token