Hybrid auth working (lots of spaghetti)