auth fix

should work