Cleaned up comments for auth.go