some notes on how i want to set up the auth system