broadcast the auth event always