got reverse auth sortof working
switched to authing on the phone and storing the secret in the plist.
i am not very happy about this