don't run AuthController#disconnect if user wasn't authed