redirect root based on sign in status
add account settings page, setup authorization checks