added authentication, stumps of authorization and audit trails