encryption for the connection tokens and such now implemented
pull down image url and profile url and make available to client (not used yet)
cleaned up some comments