fix bug of user auth