adding simplistic auth