i talked with one of you about it but can't remember what we came to. the only place we do it currently is through firebase auth right?