New auth/state system is complete. Has some new routing logic to catch the edge cases around refreshing with cookies up and some other stuff.