fix authorization(not end)