replacing one-proxy with authn