Fixed up regex of <auth> tag match in client code