few more changes. user auth now works, but I still need to make it persistent.