fix(auth): deal with bodyless requests