implement first version of auth, no control over routes
implement logging in for all pages
update before method