service factory understands auth