add home grown authentication - part 1
add authentication