Separate auth-lib and auth-service