fix auth scope