auth only tables, login, client side rendering refactored