`auth.valid_auth` sounds redundant. Perhaps this method should be renamed to just `valid?` I think that `if auth.valid?` is more conventional.