fix rackapp auth logic
olny use password for project auth