perf(auth): use generator expression in any() to allow short-circuiting

perf(auth): use generator expression in any() to allow short-circuiting #2125