more bug fixes of authorisation