fuck the chatapp we're going to authenticate
change to express-auth