Create error responses instead of default things
add some auth logic, separate things out