small fix in auth