Further improvements: Do all user-related work by _id instead of googleId (that way we are auth provider agnostic). Finish getting DELETE functional. Clean up handling of promises, use .then instead of .done. Session storage WORKS.