allowCallback in authOption.