added crude user authentication