fix: backend authentication