can block user from authenticated paths
can authenticate based on checking hashes in query-params
401 response to unauthenticated
added username password and tokens to the schema
can verify passwords against db and retrieve user id
generate and lookup tokens
dbseed can do cards and groups, still need reviews
db init fills users, groups, courses--still need reviews
dbseed does reviews