database pre-populate; browse-route server call; sign-in sign-up and sign-out; auth restricts access