simple authentication
authentication with token and user/password working - no database usage yet