BASIC, ultra basic autherization working

user auth works but refactoring now

implemented login scheme for entire api