do some CRUD with authed users