league settings, also removed the part where html description (mainly cba setting up htmlpurifier)
Always test logged out too!
Move stuff from local to global
updating user lookup route to use auth