add server skeleton
authorization