Finishing first shot at okta authentication - works but not sure how secure