Added comment to auth.js

Explained why it is there.