use encrypted data bags to hold user info, minor tweats