experimenting with userapp.io at least for a first draft of auth