authCallback assumes a blocking callback, even in EM

[mattheworiordan]

Under an EM environment, making the authCallback a synchronous callback blocks the EM loop, we should offer an alternative