call offAuth() with correct method.

closes #471.
Define variables on separate lines with their own `var`.