If you can call this method from the other auth() as:

     return auth(auth, username, password, false);

That would be perfect. Then I'll merge. Thanks!