make sure auth related vars are present - always