1 files changed, 12 insertions, 2 deletions
diff --git a/TODO b/TODO
index 7692444b..9a69ab7d 100644
--- a/TODO
+++ b/TODO
@@ -1,10 +1,20 @@
 
 ## In Progress
 
+- authentication!
+    => unit tests
+    => refactor to use other macaroons lib
+    => env key passing
+    => RBAC infra
+    => wire up fatcatd (env, cli)
+    => check permissions everywhere
+    => toml or similar key-right
+- webface auth
+
 ## Next Up
 
-- fileset/webcapture entities
-- authentication
+- cargo update (rust deps)
+- pipenv update (python deps)
 - remove the concept of "active editgroup", and simplify autoaccept batch path
 - fix returned error messages; should return type (shortname), and then actual
   message/description