back to model.subscribe, gonna play with some other thingsc
use new derby-auth store construction - has to happen before
middleware setup