front end working. session authentication still in progress