[quickthrower2]

How would such a fat client setup handle authorisation?

Closest thing to what you mention is fire base as a back end. I guess that can work.