scratchauth via wasteof confirmed???!!
using an actually trusted and secure auth provider
rolling my own auth
no
:(