fixed auth box bug