fixes to finally get StartAuth() to work end-to-end