groundwork for auth and pw reset