state.authenticate; isOwner fix;