More auth strategies, and ... whatever else seems like a good idea without slowing it down.
Changing the response body, and any other quirkiness.