Change auth

Don't merge yet; this is just an experimental idea of how to do authentication. 
It can be hard to keep this kind of comment up-to-date. Maybe just say "Implements the models described in <link to wiki>"