fixed authentication bugs in apps.graph