working app with authentication