- setup mongoose and create User model - implement user authentication by searching for user in database and check password - on react side we'll implement conditional Login/Logout links, that depend on user authentication state - make login permanent by storing JWT in local storage, so user can reload page and stay logged in - user logout