Right now, running spells requires no authentication on the server... okay, that's not good!
We can see that we are using "noAuth" in /server/src/routes/spells/index.ts
We should figure out a proper strategy that is congruous with the Latitude API, or we should think of how Thoth manages it's own needs but can contact external providers for user auth (in which case we provide a default anything-goes provider service to mock Latitude API) along with Latitude model services.