working bare-bones version of auth (single client)