fixed server auth bug