Add a touch of 'const' to some auth components, and move the simple plaintext