separate signup and auth; start project api