cors setup
working with real user accounts
very very cool