user auth, first models and basic routing in place