[WIP] User Authentication, API Handling

please delete this rather than committing it commented-out.