trying to build in the authentication and authorization