separate auth interfaces to their own files so autoload can load them without Auth main class