maybeAuthId checks that ID is valid #486