re #11 - implement authentication