Change auth

Don't merge yet; this is just an experimental idea of how to do authentication. 
"creates a model" means something different to me than what happens. Maybe "looks up User records"