add basics of auth