question + repsonse
app auth
user auth association check
add sunetid to requests