fix use of wrong member name in /userauth