fix authorisation path