verify auth now in background. Returning undefined rather than T/F.