basic user stuff working [no following, no validation errors]