This would probably be more clear as `auth[len("Basic "):]`, which gets compiled to the same thing anyways.