fixed authentication paths