authentication added and tested