bugfix auth