removed expenses crap and added authentication