added authentication and started ACL