fix more auth