one launcher, always passes through auth