made some headway on authentication stuff