switched authentication schemes since we were having issues deploying to heroku