return none from auth decorator