Just on and off (so we maintain color options)
Move authentication into sub-auth json