fix wrong auth api