generalised the Auth layer - introduces API authen/z_dataobj_action and a trigger to call for auth methods