fix auth path