figured out authorization, about to implement