move sinatra auth to complete