most of auth done, but NOT DEBUGGED YET bc of blank page error