start wiring up authentication
merge
use a hardcoded demo user for authentication
add tests for local strategy