redirect root
added secret
basic functionality