auth -> src
fix paths