fixed error in auth.js