auth work in progress
broken :-(
actually call the ssl code instead of pretending to