Auths: use uschar more in spa authenticator