app - added auth thingy