Fix off-by-1 bug in User.close().
Add hub as argument #3 to authentication calls.