fixed auth settings