fix bug authorization