fix for non-file auth