Fixed auth logic to return 200 when successful