Made public methods on AuthService virtual, so easier to override