worked more on basic authorization, but the wiki and user models need to be updated