fix api auth response