Create an interface for authentication concerns. So that's easier to support OAuth2 frameworks and HTTP basic auth.