replaces authentication framework with sorcery