Change auth

Don't merge yet; this is just an experimental idea of how to do authentication. 
No-indent lines start with * below, but - here.