karma: added awards for auth fails