wip: auth (added response message)