method condition in auth handler