frontend is wired up and auth is in place for backend