maybe okupy/common/auth.py?