quick & dirty auth for demoing