user auth system, design is still wip