minor bugs, hid auth_pass