more work on authentication
auth with gmail

also, obtain user's email from github
user routes foundation

generically handle session validation before handling requests
some fixes