fixed put authorization