adding simple auth