Done for the night: TODO:
login allows ANYTHING in
not logged in allows any page to be viewed