We normally just check connection.relaying for this. I don't understand why it's checking auth_user instead?