add rudimentary server to handle auth requests