add log messages for authentication
factor realtime into a service
secure realtime endpoints with access token