all auth now working also done some cleaning up of session messages and so on