scratchauth via wasteof confirmed???!!
using an actually trusted and secure auth provider
rolling my own auth
:(