added auth -- patchwork right now, saving user to mongo, returning auth via rest