fixed auth attempt