bugfix in application authentication using key