auth/auth_sam_reply: add some const to input parameters