fixed auth.. again..