What exactly do we do in this case? Ignore the message or send an auth error? Sounds better to send an auth error and then also issue this log error? (We will get airbrakes, but things will go smoothly). 

So, maybe return a default auth:false thing along with this existing log statement.