authorization bug fix