fix auth issue

And I think Sync deserves special attention. It has the exact property you're describing: "keep these two things synchronized" sounds trivial, but once you ask what happens when one system is down, an event is duplicated, both systems change simultaneously, a request times out, or 50,000 records need syncing, you suddenly have a serious distributed-systems project underneath a very simple product.