diff --git a/src/sbbs3/websrvr.c b/src/sbbs3/websrvr.c
index ef8dfb2c3432b4abe0eec1bc90a3b51ab01ba223..6c43e06253acb9e66e4e946a4c911a36389af6e8 100644
--- a/src/sbbs3/websrvr.c
+++ b/src/sbbs3/websrvr.c
@@ -1164,8 +1164,7 @@ static BOOL parse_headers(http_session_t * session)
 					if(p==NULL)
 						break;
 					while(*p && *p<' ') p++;
-					b64_decode(p,strlen(p),p,strlen(p));
-					SAFECOPY(session->req.auth,p);
+					b64_decode(session->req.auth,sizeof(session->req.auth),p,strlen(p));
 					break;
 				case HEAD_LENGTH:
 					if(session->req.dynamic==IS_CGI)