Isn't a decent auth library boilerplate at this point?