new auth working
only owner can edit/delete
register new user. still need to validate
let anyone see content
allow browsing without logging in