bandaid fix user auth required