set a default for null auth attributes