fixed auth process