started actually checking appID

still gotta clean up a lot, but now we check appId for a lot of things