authenticate added(doesn't actually authenticate, changed header file, changed login, should redirect