Second pass at remote user authn