Prevent 500 if Auth is overrided.

Just added the verification so people can override Auth component.
It will always default to true, but if someone overrides Auth for ldap or whatever, it skips this step.