password
rework api a good deal. add basic login/logout support via email/password