auth bug