Fix #5: hook auth up to Nemesis