authorization bug fixed