fixes on auth