Auth works.  I think.  basic tests in place and pass, but probably could use some more verification at some point