more auth fix