- finish root authentication
- remove TODOs in the code
- turn it all asynchronous
