start working on auth
more auth
tentatively working bearer auth