pass auth_hash to #on_success. Call it upon bumpy registration too.