provision for checking identity rather than just username
wip: moving to ui router wizard