auth + fix