crude authentication implemented