#1: authentication added, authorization still open

resolves #4