fixed auth bug with create problem