fix auth, on ogin