fixed auth-feature