auth, db access, routing