basic user sign-in / sign-out flow in place; need to add sign-up, as well as unit tests