almost there, just not getting user handed off between azure and middletier