Why doesn’t the bigger app that needs authentication not just eat the smaller app?