super naive auth system