added associations, validations, auth -- auth not working