change auth to a flag instead of commenting out code