fix auth (partially)