fix unauthenticated bug