added authentication

and locked down the ability to add a new song