sub auth {
    my ($self, $uname, $passwd) = @_; 
    my ($dbsecret, $salt);
    ...
}