enh: auth lib app, using auth in json handler