also how does code-server handle auth? is it just straight a public tunnel to the machine's filesystem? if not where does it get my github creds from