roll auth functionality into person service