remote apply/grant auth on other's party page - prevents p1->p2->p1, but maybe it shouldn't?