final ar commit. still some exploit (can really only support one user properly) but good enough. added comments