real db authentication using check-password. passing subsystems into server and handlers as needed.