only include auth when present