auth
stuff
rest for spots
viewport api and all that jazz