local auth plugin, probably not working yet