In my experience this is just too big of a prompt to give it.

The best way to use it is to make everything as atomic as possible. Ask it for one function at a time, rather than "make my app handle user auth"

Of course one can dumb down the requirements so that it will handle, but what about "once basic auth is added, check which endpoints should require it and by what clients" - any real work is out of the scope currently

This is why Prompt Engineering is a legitimate profession.

In the future, you could prompt GPT10 with "give me a marketing plan" and its output would be just as terrible as GPT3's.

Leveling up one's prompting skill from zero shot to few shot to agenetic is how you get usable results.