working version that combines auth and my_forwarder. still some voodoo with vlan_lb