basic authenticatin in place