## TODO - better auth error handling - display validation errors in auth forms - race condition on login; sometimes doesn't actually login