[fix] splice auth from registry if it exists to handle private npms