big changes

can unsubscribe, change preferences, can only sign self up, uses CAS
authentication