move toward api authentication.  Login api route working, still need header template update, signup, and so much more.