small auth fix