*might* add v3 auth to heroku