Ensure that auth is sorted.

Defensive programming: make sure auth is sorted. A different ordering should not result in new tiles.