fixes on authz