fix auth tag