authentication in place, nav needs cleanup