bugfix for auth