REALLY NOW: hacky auth implementation