added auth flow, mostly working, nothing is checking for auth yet