fix(auth): resolve confirmed findings from the Fable-5 security audit

fix(auth): resolve confirmed findings from the Fable-5 security audit #80