starting to add auth to sinatra app