Good catch. I think I was experimenting with the critical flag of the auth controls. This should be removed.