reworked auth for subscriptions
a whole bunch of stuff to a whole bunch of things for auth/store