vestigial stand-alone auth server application