what's the authentication bug?