Fixing an oversight in two conditionals within `auth()`