refactor the authentication/security parts
move all fake authentication stuff into security.fake package