fix bo auth