using that API layer, you can gain a lot of flexibility in terms of various auth related functions you may want to carry out...