search edge cases all working
move user deauth event to Products model.  TODO: move auth to collections