authentication works... but hacky
working: auth, lists, todo list made