simple authentication - need to add this to bpcc