broken auth conf #10