finish queries
permissions
implement leader board. closes #29