refactored auth_params private method