authentication for /tablet
resolves #50