add user@box specification, basic encryption text and some todos. fix some text blocks