First crack of the server component of apps.auth.