minor fixes for unauthorized