end-to-end x-auth implementation.