updated auth to use _id and rudementary messages are now working (they're sending at least)