Move the xauth command back within the xserver session, and turn on the SECURITY extension for the xserver