[*] fix auth