fix authentication