authorization bugs repaired