TODO
as of 2017-12-17

*) turn backend engine into a service
*) introduce support for EAP authentication (if possible at all)