fix auth (store in db)