add changelog entry about fixing auth