feature flag was wrongly named: reauthorization instead of reauthentication