fixed an authentication bug (fail if tag not found)