fixed authentication for apps