WIP auth refactoring to decouple endpoints/auth.