backend/auth: add backend authentication support