fixed auth with WSGIPassuAuthorization