return string when auth error as really lazy solution