builtin auth system discussion