If there is an error, should we return a default false auth type? This might cause potential crashes, no?