fix auth on production