got the authentication and authorization pieces working