logins, sessions, and authorizations working