fixed authentication and regexp as paths