fixed additional pen authorization flow