fix global $AUTH hiding $auth