extracted xing yesod auth plugin