Wrap all callbacks in auth