login and authentication are set up. todo: testing and sessions