fix: auth callbacks