authtoken — web UI scaffold (build-out pending)