beginning to work on storing user credentials
playing around with getting user data from a provider
rather than the client getting the data, i think we should have the backend do it. i might change my mind again