fix auth paths