added basic behaviour, without auth