refactored dataAccess to be DRY-er; added beginnings of login/authentication.