validate product
signup/login/logout but authorize have not yet!