implemented user auth, player validations, gravatar