authentication system works but needs work to make it user friendly and to handle permissions levels