add simple auth, add login required, add session manager