fix magic auth against orphaned duplicated hublocs