add comment linking to auth state bug