work in progress, delegate authentication to stormpath service