corrected a bug when authentication is set without authorization or rate-limit