Authentication

@aslawter , @mikeymurph77 
Thought I saw something from Steiner saying you should use the active record errors.