Pin dw-auth on something other than dw-core.