The `auth_handle` fn in AuthHandler is synchronous, make it difficult to invoke some async operations, like querying DB. It will be better with an async AuthHandler.