capture username + password
404 page
beginnings of sign up route
more auth work