erase old user stuff, create authentication route for api