will be allowed to be undefined
auth will be defined, just check if not None