shit all over the place... can't keep user logged in