bug with auth check fixed