setting up for heroku, added auth