mods to User tables to enable authentication
application now requires a Google account to log in.
lock down AJAX endpoints
remove hardcoded user ID