fixed manual authentication