fix auth i think