added TODO comment regarding the addition of a User class to handle auth.