Fix browser permission check; remove unused auth apply fields