signup/login buttons and refactor auth check
hopefully a final pass at authentication