wrong module scope in auth