auth

authentication is a little more robust, but its still not where it needs
to be