fix mistaked auth