things have fully working permissions
serverside permissions
Authentication header in frontend client in all http requests
Backend now has fully working auth (I think...)
added thing permissions
got rid of those pesky 'trigger' and 'detrigger messages'
all the permissions for everything else that I can think of right now
changed defaut page to login page
somewhat complete login screen