This lets authHandler escape into a global variable. Should probably be 'var authHandler'.