broken auth conf #24