missing null check in glass auth steps