implemented auth/access setup