moved some stuff around, following a good tutorial now to work through authentication