implementing authentication
logout still