Update auth-util.js