corrected auth bug