moving authentication to separate module
users from file
data excluded
simple persistent users solution