basic login, listing and guest access works