Experimentation with a centralized authentication and authorization service