initial commit, local auth working