new update - invalid auth attack