really fix the auth tutorial, closes #102