downcase before saving
ripped out static specs
lets start over on the whole sessions thing...
basic auth in place