add some foundations for better server management of authentication