now with user authentication pages and setup, with session but still being persisted in memory