auth fixed again