Handle authResponse properly
Attach listeners on incoming actions only after identity has been verified
Add TODO comment