Update provider.py

Setting auth as a class variable so validate_access_token can set self.auth.isValid.