unfinished middle code

Just basic ability to verify credentials.  Need Sebastian's API to get legitimate user info against which I can test the code.