Invert the auth checking logic so it's readable