added basic authentication with barebones user model