fix self-authorization