start working on auth0 server side