refactored to decouple httpAuth from redux user. now have backlog