fixed double auth bug