authentication bug correction