I guess it would be better to move these up and use them in `hasLocalAuth` and `hasRedirectAuth`