parameter auth is missing