solidifies auth groups, adds publish workflow