bugfixes authorization