fixed authentication (: