move auth logic into omni
move auth logic into omni