authentication partly done
logged in working but with bad database
login logout, edit profile, require_same_user