fix checkAuthz