#49 very basic auth feature