another round of setup. for demo, decided to assume user is logged in.