most of the way through 9: view users, current user authentication