fixed broken auth for staff users

Signed-off-by: Sweil <mail@sweil.de>