Include a success=false if auth failed