fix auth
fix back database
add auth check
merge