fix broken authentication