really rudimentary support for dealing with users on the backend. closes #10 (not well, but sufficiently)