@bea you could just make it send yourself a DM with an authentication page. then users will assume it always involves a DM with an authentication page. if we ever *do* open that feature up to other users then a) the code will be already there b) the behaviour will be already known