added authentication;
logout link not working yet