refactor db stuff into a different file
admin stub, get web.authenticated working