authentication is working. it's not beautiful though.