And they will be able to do that anyway, by passing 'auth' param directly.