auth implemented, login cleaned up