Flexible auth server