Clarify language in auth.js