initial commint
up to Section 9 in tutorial - Server Side Authentication