* ignore underscores * great user and redirect to login on /app * format * pass user as property of data object