Auth: fixed auth against auth.account