getting closer to fully functioning authentication