adds application skeleton and some basic authorization