fixed authentication again