also handle null auth data case