broken auth