auth-bug fix