FIX: add package.json auth.type