starting to add authentication stuff