fix spree user authorize