Json auth plugins

this follows from #549