some cleanup
authenticator stuff is much further along
simple authentication at the service level
beginning speccing out server configuration storage/bootstrapping
hubba and app are using seperate sessions