scaffold-day auth broker