fixed bug (404 AccessDenied)