got backbone auth working, but super messy
cleaning up auth