make auth_verify() resolve/reject its promise instead of always resolving the promise to a boolean