add authentification + basic routing