fixed authentication