bugfix: forgot the auth in a curl