bugfix: auth form didn't show