#39: add authentication endpoints