fold auth into handler wrapper