Added Poor Auth

Auth kind of works. If failed to login, a second attempt is not
possible without refresh.