Half-baked authentication and authorization