auth now working reasonably well. buggering around with model, view and router.