Fix auth security