fix requireAuthentication()