fixing last step of auth