auth bug fixed