auth sortcut
Permission based auth model
Domains
localhost != 127.0.0.1