adds field level security, token generator, nyi page, and ui-auth syncing