auth fixed