Fix a typo in auth.clj.

Thanks to Alexei Guevara for spotting this.