fix global request, fix auth