setup with very simple authentication