the current implementation uses a custom implementation, but we are going to be moving to firebase authentication (to mainly accommodate for different types of authentication such as google). we would mainly need to implement a middleware that can be reused based on access.