wire up auth logic
fix
work on authorization
process realm permissions from config
more work on realms