auth.auth: ensure v