adding authentication, some cruddy things