implemeneted basic authentication, still need to check for password