GitLab

split things out to avoid circular imports (AAAAH)
login works again and now checks against db
utilising a User class as abstraction for db