authentication bug fixed