#337 Auth provider should return cancelable protocol