fixed crowd authentication