fixed authenticate