this was a relic from the python version, i'd modeled the auth code off some random blog post back then.