One other thought here is that it would be helpful for users to see a log message at the debug level just confirming that auth is being attempted.