adding authentication machinery
Merge branches 'master' and 'sign-in-out'