beginnings of auth, working up to pick username/password