fix some typo when refactoring Auth