## TODO
- better auth error handling
- display validation errors in auth forms
- race condition on login; sometimes doesn't actually login