authentication/authorization
implemented gatekeeper structure for authorizing users access to endpoints