seperate in-memory store from auth.js