check for AUTH extension before authenticating