clearer naming
added code to do login. still need to add some kind of session / token service. probably redis