fix copy-paste snafu which broke the authentication code