started auth stuff, added a few fields to user