you might do some async stuff in that auth body and so it has a callback when you are all done to let socket.io know if the auth was successful or not