REF: made auth methods static for cleaner code on server side, added auth prefix, doc