fixed sign in auth