add v1.0 auth, other terrible travesty for PoC