fix a bug
try to add auth