first steps of auth
things
sign up works sign in doesnt