auth.go: First check parameter count and only then get a type of the parameter