fixing api-auth