Better authentication approach

[sckott]

comes via #19

From Dan #19 (comment)

I wonder if there is a better/safer way to authenticate that does not involve using a password like this. Probably a v2 thing but we should think about it.

And see comments on it from there