oidc, saml, ldap etc, etc....yes, i'm researching authentication again. scary stuff.

again, shout out to #yunohost that does all this stuff by default. i always say this --- authentication is the hardest part of self-hosting.