draft auth server
default to cms
auth server basics working