good start on some auth tools