new auth working
only owner can edit/delete
register new user. still need to validate
let anyone see content