pass options to auth.check()