Early on the redirects and responses were in the Auth() object, which is not where they belonged. They've since been removed.

TLDR; no longer applicable.