wrote https://github.com/pmprosociety/authcompanion to try and bring auth back on-prem.