fix incorrect use of authentication where authorization was meant