cleaned up
added authenticate decorator and more session things