toy, not a library. just playing around with macaroons for auth