fourth commit - adding security and authorization