i really really want to use PostgREST on a real-world app, but the authentication it's not there yet for me. even tho i could have a services app (auth, pass reset, billing) and keep the data in a PostgREST instance. but it feels awkward not having a foreign key tied to the user.