Shuffle some of the authentication stuff around
Add association between users and policies
Make account settings page dynamic