Placed a useful pick_auth method in the Provider class.
If exact match is required only do that.
In some case you really want to return an empty message.