When and how to use the Auth-Type attribute