story runner on restful_authentication question