auth stuff, turbolinks ruins my day