bugfix: auth before connected