better error handling on user auth
switch to visibility for page
rework auth mechanism