diff --git a/TODO b/TODO
index 86e17cf..5909535 100644
--- a/TODO
+++ b/TODO
@@ -1,13 +1,17 @@
 ## GENERAL
 
+    * incorporate flask-login and flask-ldap3-login
+        https://flask-login.readthedocs.io/en/latest/
+        https://flask-ldap3-login.readthedocs.io/en/latest/
+        https://pythonhosted.org/Flask-Principal/
+        # this is an example:
+        https://code.tutsplus.com/tutorials/flask-authentication-with-ldap--cms-23101
+    * user management scope
+        - do I want admins only? I definitely * want a read-only / share (but to a subset potentially?)
+        (see point above for how to do all this)
     * fix up logging in general
     * comment your code
     * more OO goodness :)
-    * sorter... 
-        need some way to multiselect images [DONE]
-        and then get them into a new "folder" 
-            - this needs to 'move' the files / database info from import path to new storage path -- so if we do face rec. we don't need to redo it :)
-
 
 ## DB	
     * Need to think about...
@@ -22,6 +26,7 @@
 ### BACKEND
     * revisit SymlinkName() and make it simpler (see comment in shared.py)
     * if you change paths in settings, then re-run Initialisation checks (for symlinks to new path names)
+        - this actively is crashing, added a file in storage2/ (no symlink), so job mgr crashed, and DB doesnt have the content until you make the symlink (via re-running job mgr)
     -- started on some basic optimisations (commit logs every 100 logs, not each log)
         - with debugs: import = 04:11, getfiledetails== 0:35:35
         - without debugs: import == 04:03, getfiledetails == 0:35:36 -- not a sig diff