changed 'auth' from provided to include