added some simple authorization clientside and serverside...still plugging along and enjoying this learning