fix forward-auth