added simple auth (has not working now)