added authservice, untested and dependent on (currently) nonexisting authserver.js