diff --git a/app/actions/media/create.rb b/app/actions/media/create.rb
index 05e6c4d..ab9d725 100644
--- a/app/actions/media/create.rb
+++ b/app/actions/media/create.rb
@@ -3,7 +3,7 @@ module Adamantium
     module Media
       class Create < Action
         include Deps["commands.media.upload"]
-        before :authorize!
+        before :authenticate!
 
         def handle(req, res)
           data = req.params[:file]
diff --git a/app/actions/media/show.rb b/app/actions/media/show.rb
index 937e58e..2a0227a 100644
--- a/app/actions/media/show.rb
+++ b/app/actions/media/show.rb
@@ -7,7 +7,7 @@ module Adamantium
         def handle(req, res)
           res.body = if req.params[:q] == "source"
             {
-              items: media_url(params[:file])
+              items: media_url(req.params[:file])
             }.to_json
           else
             "Micropub media endpoint"