authentication done in app.py

quick pull request so that authentication is in master