Server-side Auth.