potential solution to ripping out wm-auth deps completely