began adding authentication
lots of model stuff
added middleware