auth bug fix