fix fringe case in auth.js where a session times out.