fixed cmAuth and cmAuth.test