fix syntax
implementing simple auth