#2 - first working version of authentication and authorization