added proper authentication, and proper implementation of wholasthr