auth variables fixed