update
clean up
handle protected users, non-existent users, invalid credentials.