declare 'auth' in function scope of globalOptionsFromURL