update auth lib

Since tcUser is hardcoded in auth lib for now, I cannot set his permissions in test env. So the test may be simple as it doesn't cover all scenarios.
@indytechcook  - this looks off. 

- shouldn't ```safeList.safeList``` be removed?
- also it looks like this call does not match up w/ the addAuth method. am i missing something?