moving auth stuff around...moving validation to gateway
moving auth stuff around...moving validation to gateway