fixed post auth