updated logging in auth.js