modular auth, part 1: add auth_ops structure and api definition (feature #27)