fix bug in forceAuthn support, add some comments