improved auth, added /intro /list /users /cancel