Rough implementation of local security via passport.  Fake user lookup etc. at this point and also not modular.