fixed bug in the new auth backend