working on authentication.   backup.js is old app.js