fix post auth