Provider setup; unfinished

still needs our own User object, and authenticator still needs to
authenticate to Simba; same for authorization.