WIP: intercaptor for auth