removed auth-list