bug in authorization module was fixed