fix auth api