fix restfull auth bugs
