master
rewrite auth on cookie
replace deletion with deactivation
refactoring
add auth and register
fix