started moving to json web tokens
auth via json web tokens in place, sessions supported(need to add expiration)
fixed signup