fixed bug with kerberos forwarding