went through auth tutorial, added user stuff, needs refinement