settings page with a sprinkle of authorization
finished basics of users