basic authorisation bug fixed