Use plain string for auth instead of ObjectIds