add remote user authentication; closes #2