wip(auth): first dut of auth service API