some WIP on auth etc.