use correct auth variable