fixed oauth statement authority check