add auth logging, and exit early if not found