passing: began authorization. realized need to refactor many models/controllers. to finish later.
end