make very sure we don't keel over if something goes wrong polling security status in auth