fixes for authorisation