user auth overhaul (probably needs more work)