request phase tries to make things work

gets multi-auth request phase working