1. write an auth test that verifies only authenticated ppl can get into the Editor 2. write a function that can validate auth w/ an oauth provider 3. write a blog post about wiring this up Blocked by - needs a page to protect