trying authentication stuff, need to implement userprovider