finished some authentication..still need testing