Auths: fix possible OOB write in SPA authenticator. Bug 3000