Fixed security flaw in Auth method